$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft File: S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json) Hash identifier: s35nEwiN0iFiBdCqfjUjx7QoSn+GvwC+odPTnoqteAg= Subject key identifier: B3:F5:A7:58:23:A8:C1:33:6E:35:F5:6F:85:52:68:83:20:82:B7:09 Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Certificate serial: 3401 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft Manifest number: 33DB Signing time: Sat 04 May 2024 15:34:46 +0000 Manifest this update: Sat 04 May 2024 15:34:45 +0000 Manifest next update: Sat 11 May 2024 15:34:45 +0000 Files and hashes: 1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: 0fq7DtMn4/PQzmVaSQru5DsC2jLgRmbdpP5g6v2T23w=) 2: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: xPg5tlEwqINCeswuqDxeM0Vb5MPzPj34N6MZyvaeEys=) 3: 0767F34C845911EA8651FB1AC4F9AE02.roa (hash: 6pt5a2BaseUFsdGiT+V7JpEnHO1scmuyvolAexchnN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13313 (0x3401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD Validity Not Before: May 4 15:34:45 2024 GMT Not After : May 11 15:34:45 2024 GMT Subject: CN=66365595-9a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:30:6e:c3:68:12:a0:cb:dd:7d:11:b2:b4:78: 97:fd:29:c3:92:86:7b:90:b5:b3:08:44:75:4f:24: 29:85:95:cd:6a:f8:2e:86:57:a0:cb:70:c9:fd:18: d3:22:0f:13:b7:ed:79:1b:0c:92:95:48:0b:ba:9a: 53:48:cc:6a:7c:72:9a:a5:18:cc:6a:49:7a:c7:58: 8c:b6:1d:01:d6:13:c6:ca:59:57:7b:1f:49:8f:05: 8e:e8:df:9a:0a:6a:a5:b1:13:73:aa:e3:a4:cf:23: 95:d8:91:ab:5e:b0:6f:b6:70:ec:99:88:dd:a4:1e: e6:f6:5f:e3:cc:d9:60:c9:76:4c:62:b7:ad:de:d6: 18:28:15:69:01:77:81:49:0a:dc:c1:a2:85:c3:4d: 53:40:89:f7:44:78:51:29:fb:67:95:1f:40:79:ec: aa:9f:20:77:b4:02:b0:2e:e6:46:92:a2:41:2b:79: 4a:e8:90:79:b5:a0:12:19:66:65:ed:c8:03:be:3c: 60:42:c3:cb:5f:1b:dd:81:3e:3d:59:5d:d6:fb:f5: ea:81:45:3e:95:06:84:21:7c:73:e7:c9:1b:bd:78: 15:61:f9:70:67:58:04:b7:35:dc:30:8b:16:16:ba: 0b:38:ff:bb:d1:27:56:b9:78:cd:68:30:f7:47:c1: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F5:A7:58:23:A8:C1:33:6E:35:F5:6F:85:52:68:83:20:82:B7:09 X509v3 Authority Key Identifier: keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:63:90:28:f2:11:28:68:09:49:60:a7:3d:dd:57:92:44:fe: 8d:04:98:81:76:23:e0:92:0b:5f:ab:df:13:d3:67:2b:1e:1d: 3b:93:70:26:f3:98:db:42:f7:0f:2b:55:67:46:a4:51:59:77: 70:09:99:c5:da:1d:5a:bd:44:79:29:55:f8:5e:77:c6:b4:71: 78:01:7c:5d:ae:50:8f:4d:5b:af:a0:5e:12:6d:83:d3:c8:aa: 44:81:29:07:9f:93:97:ea:87:c4:d1:eb:4f:0d:78:be:f1:be: 0b:7e:e7:e1:c6:aa:16:cc:f2:68:61:bd:29:78:f4:c2:21:04: 06:e2:d0:63:52:8f:c1:19:ff:de:b5:82:b1:9e:d2:bb:17:9d: a8:86:6c:e5:91:8a:33:c5:49:d7:5c:56:da:1a:24:c2:1a:00: 06:a8:de:2d:bf:19:e6:2b:99:e7:66:5d:ea:93:5a:32:b2:b3: 52:62:b7:50:4b:e0:98:d3:86:af:ac:44:70:6d:ce:3b:c6:7d: 4e:ff:a8:f4:04:60:01:b9:e3:fd:f9:dd:4d:a9:79:85:e4:55: 7c:a5:d4:7f:39:84:2a:c8:05:a3:b1:df:a3:d7:c5:14:4b:09: f2:f3:93:b8:a1:0b:db:3f:4b:d2:59:5a:8f:66:00:4c:25:d2: 43:02:67:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD OTFDMjdDREQwHhcNMjQwNTA0MTUzNDQ1WhcNMjQwNTExMTUzNDQ1WjAYMRYwFAYD VQQDEw02NjM2NTU5NS05YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TBuw2gSoMvdfRGytHiX/SnDkoZ7kLWzCER1TyQphZXNavguhlegy3DJ/RjT Ig8Tt+15GwySlUgLuppTSMxqfHKapRjMakl6x1iMth0B1hPGyllXex9JjwWO6N+a CmqlsRNzquOkzyOV2JGrXrBvtnDsmYjdpB7m9l/jzNlgyXZMYret3tYYKBVpAXeB SQrcwaKFw01TQIn3RHhRKftnlR9AeeyqnyB3tAKwLuZGkqJBK3lK6JB5taASGWZl 7cgDvjxgQsPLXxvdgT49WV3W+/XqgUU+lQaEIXxz58kbvXgVYflwZ1gEtzXcMIsW FroLOP+70SdWuXjNaDD3R8H32wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP1p1gj qMEzbjX1b4VSaIMggrcJMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk0Ri9BMDI5QTUyNjFEQUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUt TzE2WGljWjhZNzdKSENmTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQY5Ao8hEoaAlJYKc93VeSRP6NBJiBdiPgkgtfq98T02crHh07k3Am 85jbQvcPK1VnRqRRWXdwCZnF2h1avUR5KVX4XnfGtHF4AXxdrlCPTVuvoF4SbYPT yKpEgSkHn5OX6ofE0etPDXi+8b4LfufhxqoWzPJoYb0pePTCIQQG4tBjUo/BGf/e tYKxntK7F52ohmzlkYozxUnXXFbaGiTCGgAGqN4tvxnmK5nnZl3qk1oysrNSYrdQ S+CY04avrERwbc47xn1O/6j0BGABueP9+d1NqXmF5FV8pdR/OYQqyAWjsd+j18UU Swny85O4oQvbP0vSWVqPZgBMJdJDAmep -----END CERTIFICATE-----Generated at Sat May 4 16:48:39 2024 by rpki-client on console-ams.rpki-client.org